Senior Member of Technical Staff - PenTesting

ThoughtSpot; Bengaluru; On-site; USD 909 - 1,364; Full time

Job summary

An innovative firm is seeking a Senior Member of Technical Staff specializing in Penetration Testing. In this pivotal role, you will enhance the security posture of a cutting-edge analytics platform, conducting comprehensive security reviews and penetration tests across various environments. Your expertise will guide product teams in addressing vulnerabilities and implementing best practices in application and cloud security. Join a forward-thinking organization that empowers businesses to leverage data insights and make informed decisions. If you're passionate about cybersecurity and eager to tackle complex challenges, this opportunity is perfect for you.

Qualifications

• 5+ years in cloud security and security engineering.
• Expertise in OWASP top 10 risks and penetration testing.

Responsibilities

• Conduct security reviews and penetration testing for applications.
• Provide technical leadership on application and cloud security.

Skills

Cloud Security

Security Engineering

Network Security

Penetration Testing

Risk Analysis

Collaboration

Education

Bachelor in Computer Science

Master in Information Security

Tools

OWASP ZAP

BurpSuite

Nmap

Job description

Senior Member of Technical Staff - PenTesting

About the Role:

ThoughtSpot is on a mission to create a more fact-driven world. Our platform is disrupting the $200B+ analytics market industry by making it 1000x faster and easier for non-technical business people to answer their own data questions, based on innovations in search engines, in-memory large-scale computing & AI technology. With ThoughtSpot, anyone from C-suite executives to front-line employees can use a simple search to instantly analyse billions of rows of data, and leverage artificial intelligence to get relevant insights on questions they might not have thought to ask. If you’re looking to solve hard problems in a large market, this is the role for you!

ThoughtSpot is a pioneering company at the forefront of the data analytics and business intelligence industry. Our platform empowers organizations to transform their data into actionable insights, enabling them to make smarter, data-driven decisions.

What You Will Do:

1. Contribute towards the overall security posture of ThoughtSpot services running across multiple cloud and hybrid environments.
2. Lead and conduct security reviews and threat modelling for architecture changes and feature design, while ensuring robust mitigation of identified risks.
3. Conduct application and infrastructure penetration testing for ThoughtSpot’s web application, mobile applications for iOS and Android, and public APIs through automated and manual testing.
4. Provide technical leadership and training to product teams based on the continuously evolving security landscape and best practices of application and cloud security to prevent security vulnerabilities.
5. Work with members of our Application security test and Infosec team to assess new security vulnerabilities and assist product teams by providing risk analysis, suggesting fixes, and plugging gaps in prevention and detection controls for the overall product.

What You Will Bring:

1. 5+ years in cloud security, security engineering, security solutions, network security, architecture, and operations experiences in SaaS and on-prem products.
2. Expertise in OWASP top 10 risks prevention and detection methodologies.
3. Working knowledge of various testing methodologies and tools used by security researchers (e.g. OWASP ZAP, BurpSuite, Nmap).
4. 3+ years of hands-on experience on black box, gray box, and white box web and mobile app penetration testing to find vulnerabilities.
5. Expertise in application, cloud, and network security domain.
6. Knowledge of secure SaaS architecture and cloud operational models.
7. Experience in communicating and collaborating with diverse, cross-functional teams working across different geographic time-zones.
8. Bachelor/Masters in Computer Science, Information Security, Cybersecurity, or equivalent.

Standout Skills/Key Differentiators:

1. Certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), eLearnSecurity Certified Professional Penetration Tester (eCPPT).
2. Strong working knowledge of at least one programming language C++, Java, Go.
3. Deep understanding and experience of multi-layer security controls ensuring confidentiality, integrity, availability, and auditability (e.g., DDoS protection, WAF, CSPM, SIEM, Network Segregation, Encryption, IAM).
4. Experience and understanding of Container/Kubernetes security and controls.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Administrative and General Business

Industries

IT Services and IT Consulting and Data Infrastructure and Analytics